DevSecOps & Security · Data Service Group · 2024 – now
Security scanning built into GitHub Actions
30%+ fewer code security issues
SonarQube, Snyk and AWS Inspector run on every pipeline across Java, .NET and Python services.
Problem
Code security issues across several language stacks needed to be caught in the pipeline, with policies enforced automatically rather than by manual review.
Solution
Integrated SonarQube, Snyk and AWS Inspector into GitHub Actions pipelines for real-time vulnerability scanning and automated policy enforcement across Java, .NET and Python.
Architecture
- Push / PR
- SonarQube
- Snyk
- AWS Inspector
- Policy gate
- Deploy
Tools
GitHub Actions
SonarQube
Snyk
AWS InspectorOutcome
A reduction of more than 30% in code security issues across multiple language stacks.
Next projectCI/CD for containerised microservices →